DittoETH

Ditto
DeFiFoundryOracle
55,000 USDC
View results
Submission Details
Severity: high
Invalid

There is no check for the price of an Ask

Summary

There is no check for the price of an Ask

Vulnerability Details

You should always check for the 0 value of the price, because all of the users can miss click and someone can buy an asset for zero price

Impact

Loser funds

Tools Used

manual

Recommendations

make a check or double verification for the price:
require(price> 0, "the price is equal to zero");

Updates

Lead Judging Commences

0xnevi Lead Judge
almost 2 years ago
0xnevi Lead Judge almost 2 years ago
Submission Judgement Published
Invalidated
Reason: User input validation

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.